Privacy
Last updated 29 October 2026
The short version
- You don't need an account. We keep what you type into an event, plus basic visit stats.
- Anyone with an event's link can see it, names and answers included.
- Events are deleted 90 days after their last date.
- No ads, and we don't sell your data.
- Email support@kitokoto.com and we'll delete whatever you ask.
What we keep
- Your event: the title, dates, place, note and your name. Your email if you add it, to put you on the calendar invite and let you back in from another device.
- Your answer: your name and what you picked, which anyone with the link can see. A note goes only to the organiser. Your email if you add it, for updates about that event.
- If someone adds you: the email or name an organiser typed in, used only for that event.
- Secret Santa: the names and who gives to whom. Each link shows only its own match.
- Cookies: a random key so your browser can change what you made or answered.
- Visits: PostHog records the pages you visit and what you click, with your browser, device and rough location. If you sign in, it also gets your account ID, never your email.
Why
To run the event you made or answered (GDPR Article 6(1)(b)). To send the invites and updates an organiser asked for, and to fix errors and see what gets used (our legitimate interest, Article 6(1)(f)).
Who else handles it
| Company | What it does | Where |
|---|---|---|
| Vercel | Hosts the site. | EU |
| Neon | Stores the data. | EU |
| Resend | Sends the emails. | EU |
| PostHog | Counts visits and clicks. | EU |
| Cloudflare | Checks that a sign-in comes from a person. | Global |
How long
Events go 90 days after their last date, or after they were last changed if they have no dates, with everything on them. Secret Santa draws go 90 days after the draw. PostHog deletes visit data on its own schedule.
Your rights
Ask to see, fix or delete what we have about you, or to stop using it: support@kitokoto.com, with the event's link if you have it. We reply within a month. You can also complain to the data protection authority where you live.
Kitokoto is run by us at kitokoto.com, and we're responsible for this data.
Under 16? Use it with a parent or guardian. The rules for using Kitokoto are in the terms of use.